Workgroup access over VPN

[MrOyvind]

Hi

Scenario :

1812w router running as VPN server (without firewall for testing ).

Server 2003 with workgroup and WINS server and DHCP server( firewall disabled because of testing).

Tested remote clients OS win7 and XP pro in the same workgroup name as the server 2003 (without firewall for testing ).


The IPsec tunnel is sucessfully up, but I can`t access the shared folders. I can ping the IP address and hostname of the MS2003 from the VPN clients. Not more.
When typing netstat on the remote clients the SYN is sent but TCP not established (microsoft-DS, Netbios and HTTP to MS 2003)
The NAT transelations are established on the router.
Im not able to access anything on MS2003, just ping and resolve the hostname with nbtstat.
The \\servername does not work.

So, what to do for file access ?

Thank you.

Best regards

Oyvind

 

[MrOyvind]

Hi


Solution : access-list 10 deny 192.168.200.0 0.0.0.255
access-list 10 permit 192.168.0.0 0.0.255.255

192.168.200.0 (VPN access target to server 2003)
access-list 10 permit 192.168.0.0 0.0.255.255 (other LAN`s not to be accessed with VPN)

ip nat inside source list 10 interface FastEthernet0 overload

access-list 173 permit ip 192.168.200.0 0.0.0.255 192.168.0.0 0.0.255.255

crypto isakmp client configuration group mygroup
key sharedkey
dns 192.168.200.1 81.167.x.x
wins 192.168.200.200
pool ten
acl 173
include-local-lan
dhcp server 192.168.200.1
netmask 255.255.255.0

Best regards

Oyvind